|
|
Posted by Sig on 01/04/08 04:36
On Thu, 3 Jan 2008 10:05:58 +0000 Toby A Inkster said
> Sig wrote:
> > Toby A Inkster said:
> >
> >> Any image that can be seen using <img> can be seen by accessing the
> >> image's URL directly.
> >
> > That's not always correct.
>
> It is always correct.
>
> > I have some images that are displayed with <img src="/pv/incer3.php
> > ?z=blackler/1.jpg">, for example. The incer3 file checks a session
> > variable, and may decide to show the image using readfile(). If you
> > enter the src url directly, whether you see the image will depend
> > on the session variables. There is no actual image url to enter.
>
> There is an actual image URL. It is:
>
> http://whatever-your-host-is.example/pv/incer3.php?z=blackler/1.jpg
>
> If I enter that into my browser's address bar directly, it will display
> the image.
>
>
You overlooked what I said about the session variable. Perhaps I should have
mentioned that the session variable is set under password control on a previous
page.
--
http://koiclubsandiego.org/comment/?r=8
Navigation:
[Reply to this message]
|